pi-daddy 0.28.0 → 0.32.0

package/contracts/ledger/v2/ledger-event.schema.json

@@ -1,633 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/mojomanyana/pi-daddy/contracts/ledger/v2/ledger-event.schema.json",
-  "title": "pi-daddy ledgerVersion 2 event",
-  "description": "One JSON object per JSONL line. This schema covers only explicit ledgerVersion 2 events; legacy GrantRecord lines have no version/event discriminator and are intentionally outside this schema.",
-  "oneOf": [
-    {
-      "$ref": "#/$defs/capabilityDecision"
-    },
-    {
-      "$ref": "#/$defs/workspaceLease"
-    },
-    {
-      "$ref": "#/$defs/childLifecycle"
-    },
-    {
-      "$ref": "#/$defs/checkReceipt"
-    }
-  ],
-  "$defs": {
-    "correlation": {
-      "type": "object",
-      "description": "Opaque, non-authoritative controller metadata. String and aggregate byte limits are additionally enforced by the runtime and cannot be represented exactly in JSON Schema.",
-      "properties": {
-        "schema_version": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "run_id": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "task_id": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "workspace_id": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "context_id": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "phase": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "assurance": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "assurance_effective": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "policy_label": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "assurance_source": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "assurance_scope": {},
-        "activated_at": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "plan_digest": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "definition_digest": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "task_digest": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "base_sha": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "head_sha": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "tree_sha": {
-          "type": "string",
-          "maxLength": 512
-        },
-        "event_seq": {
-          "type": "number"
-        },
-        "last_change_seq": {
-          "type": "number"
-        },
-        "last_authority_seq": {
-          "type": "number"
-        },
-        "check_receipt_id": {
-          "type": "string",
-          "maxLength": 512
-        }
-      },
-      "additionalProperties": false
-    },
-    "refusalCode": {
-      "type": "string",
-      "enum": [
-        "CAPABILITY_ESCALATION",
-        "GRANT_ID_MALFORMED",
-        "DEFINITION_NOT_AUTHORIZED",
-        "UNDECLARED_TOOLS",
-        "UNKNOWN_TOOL",
-        "GATED_UNAPPROVED",
-        "APPROVAL_EXPIRED",
-        "APPROVAL_SCOPE_MISMATCH",
-        "APPROVAL_FLOW_FAILED",
-        "DEPTH_EXCEEDED",
-        "FANOUT_EXCEEDED",
-        "EXECUTOR_UNAVAILABLE",
-        "CHILD_TIMED_OUT",
-        "CHILD_CANCELLED",
-        "CHILD_EXIT_NONZERO",
-        "TASK_MISSING",
-        "UNKNOWN_DEFINITION",
-        "CEILING_PATTERNS_UNRESOLVED",
-        "NARROWING_VIOLATED",
-        "DEFINITION_UNREADABLE",
-        "CORRELATION_TOO_LARGE",
-        "CORRELATION_INVALID",
-        "LEDGER_WRITE_FAILED",
-        "FANOUT_FAILED",
-        "WORKSPACE_NOT_REGISTERED",
-        "WORKSPACE_NOT_AUTHORIZED",
-        "WORKSPACE_WRITE_CONFLICT",
-        "WORKSPACE_LEASE_STALE",
-        "CHECK_NOT_CONFIGURED",
-        "CHECK_CONFIGURATION_INVALID",
-        "CHECK_IDENTITY_UNAVAILABLE",
-        "CHECK_IDENTITY_MISMATCH"
-      ]
-    },
-    "refusal": {
-      "type": "object",
-      "properties": {
-        "code": {
-          "$ref": "#/$defs/refusalCode"
-        },
-        "message": {
-          "type": "string"
-        },
-        "details": {
-          "type": "object",
-          "additionalProperties": {
-            "type": [
-              "string",
-              "number",
-              "boolean",
-              "null"
-            ]
-          }
-        }
-      },
-      "required": [
-        "code",
-        "message"
-      ],
-      "additionalProperties": false
-    },
-    "approvalSource": {
-      "type": "string",
-      "enum": [
-        "prompt",
-        "session",
-        "persisted",
-        "inherited"
-      ]
-    },
-    "approvalScope": {
-      "type": "string",
-      "enum": [
-        "once",
-        "session",
-        "always"
-      ]
-    },
-    "approvalUse": {
-      "type": "object",
-      "properties": {
-        "max": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "remaining": {
-          "type": "integer",
-          "minimum": 0
-        }
-      },
-      "required": [
-        "max",
-        "remaining"
-      ],
-      "additionalProperties": false
-    },
-    "definitionDigest": {
-      "type": "object",
-      "properties": {
-        "name": {
-          "type": "string"
-        },
-        "source": {
-          "type": "string"
-        },
-        "sha256": {
-          "type": "string",
-          "pattern": "^[a-fA-F0-9]{64}$"
-        }
-      },
-      "required": [
-        "name",
-        "source",
-        "sha256"
-      ],
-      "additionalProperties": false
-    },
-    "capabilityDecision": {
-      "type": "object",
-      "properties": {
-        "ledgerVersion": {
-          "const": 2
-        },
-        "event": {
-          "const": "capability_decision"
-        },
-        "ts": {
-          "type": "string",
-          "format": "date-time"
-        },
-        "parentId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "childId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "depth": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "agentType": {
-          "type": "string"
-        },
-        "requested": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "parentGrant": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "effective": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "denied": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "clipped": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "gatedBlocked": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "blocked": {
-          "type": "boolean"
-        },
-        "reason": {
-          "type": "string"
-        },
-        "approved": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "approvalSource": {
-          "$ref": "#/$defs/approvalSource"
-        },
-        "approvalSources": {
-          "type": "object",
-          "additionalProperties": {
-            "$ref": "#/$defs/approvalSource"
-          }
-        },
-        "approvalScopes": {
-          "type": "object",
-          "additionalProperties": {
-            "$ref": "#/$defs/approvalScope"
-          }
-        },
-        "approvalExpiresAt": {
-          "type": "object",
-          "additionalProperties": {
-            "type": "string",
-            "format": "date-time"
-          }
-        },
-        "approvalUses": {
-          "type": "object",
-          "additionalProperties": {
-            "$ref": "#/$defs/approvalUse"
-          }
-        },
-        "approvalScope": {
-          "$ref": "#/$defs/approvalScope"
-        },
-        "humanDenied": {
-          "const": true
-        },
-        "gateOutcome": {
-          "type": "string",
-          "enum": [
-            "declined",
-            "dismissed",
-            "no-ui",
-            "error"
-          ]
-        },
-        "definitionDigest": {
-          "$ref": "#/$defs/definitionDigest"
-        },
-        "executor": {
-          "type": "string",
-          "enum": [
-            "process",
-            "herdr"
-          ]
-        },
-        "taskFrom": {
-          "type": "string"
-        },
-        "taskDigest": {
-          "type": "string",
-          "pattern": "^[a-fA-F0-9]{64}$"
-        },
-        "correlation": {
-          "$ref": "#/$defs/correlation"
-        },
-        "refusal": {
-          "$ref": "#/$defs/refusal"
-        }
-      },
-      "required": [
-        "ledgerVersion",
-        "event",
-        "ts",
-        "parentId",
-        "childId",
-        "depth",
-        "requested",
-        "parentGrant",
-        "effective",
-        "denied",
-        "clipped",
-        "gatedBlocked",
-        "blocked",
-        "executor",
-        "taskDigest"
-      ],
-      "additionalProperties": false
-    },
-    "workspaceLease": {
-      "type": "object",
-      "properties": {
-        "ledgerVersion": {
-          "const": 2
-        },
-        "event": {
-          "const": "workspace_lease"
-        },
-        "ts": {
-          "type": "string",
-          "format": "date-time"
-        },
-        "childId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "workspaceId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "root": {
-          "type": "string",
-          "minLength": 1
-        },
-        "access": {
-          "type": "string",
-          "enum": [
-            "read",
-            "write"
-          ]
-        },
-        "outcome": {
-          "type": "string",
-          "enum": [
-            "acquired",
-            "uncontended",
-            "refused",
-            "released",
-            "released-unrecorded",
-            "lost",
-            "retained",
-            "timeout",
-            "recovered"
-          ]
-        },
-        "recovered": {
-          "oneOf": [
-            {
-              "type": "boolean"
-            },
-            {
-              "const": "unknown"
-            }
-          ]
-        },
-        "releaseReason": {
-          "type": "string"
-        },
-        "refusal": {
-          "$ref": "#/$defs/refusal"
-        },
-        "correlation": {
-          "$ref": "#/$defs/correlation"
-        }
-      },
-      "required": [
-        "ledgerVersion",
-        "event",
-        "ts",
-        "childId",
-        "workspaceId",
-        "root",
-        "access",
-        "outcome"
-      ],
-      "additionalProperties": false
-    },
-    "childLifecycle": {
-      "type": "object",
-      "properties": {
-        "ledgerVersion": {
-          "const": 2
-        },
-        "event": {
-          "const": "child_lifecycle"
-        },
-        "ts": {
-          "type": "string",
-          "format": "date-time"
-        },
-        "childId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "state": {
-          "type": "string",
-          "enum": [
-            "starting",
-            "completed",
-            "failed"
-          ]
-        },
-        "executor": {
-          "type": "string",
-          "enum": [
-            "process",
-            "herdr"
-          ]
-        },
-        "exitCode": {
-          "type": [
-            "integer",
-            "null"
-          ]
-        },
-        "signal": {
-          "oneOf": [
-            {
-              "type": "string",
-              "enum": [
-                "SIGABRT",
-                "SIGALRM",
-                "SIGBUS",
-                "SIGCHLD",
-                "SIGCONT",
-                "SIGFPE",
-                "SIGHUP",
-                "SIGILL",
-                "SIGINT",
-                "SIGIO",
-                "SIGIOT",
-                "SIGKILL",
-                "SIGPIPE",
-                "SIGPOLL",
-                "SIGPROF",
-                "SIGPWR",
-                "SIGQUIT",
-                "SIGSEGV",
-                "SIGSTKFLT",
-                "SIGSTOP",
-                "SIGSYS",
-                "SIGTERM",
-                "SIGTRAP",
-                "SIGTSTP",
-                "SIGTTIN",
-                "SIGTTOU",
-                "SIGUNUSED",
-                "SIGURG",
-                "SIGUSR1",
-                "SIGUSR2",
-                "SIGVTALRM",
-                "SIGWINCH",
-                "SIGXCPU",
-                "SIGXFSZ",
-                "SIGBREAK",
-                "SIGLOST",
-                "SIGINFO"
-              ]
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
-        "timedOut": {
-          "const": true
-        },
-        "aborted": {
-          "const": true
-        },
-        "truncated": {
-          "const": true
-        },
-        "reason": {
-          "type": "string"
-        },
-        "correlation": {
-          "$ref": "#/$defs/correlation"
-        }
-      },
-      "required": [
-        "ledgerVersion",
-        "event",
-        "ts",
-        "childId",
-        "state",
-        "executor"
-      ],
-      "additionalProperties": false
-    },
-    "checkReceipt": {
-      "type": "object",
-      "properties": {
-        "ledgerVersion": {
-          "const": 2
-        },
-        "event": {
-          "const": "check_receipt"
-        },
-        "ts": {
-          "type": "string",
-          "format": "date-time"
-        },
-        "childId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "receiptId": {
-          "type": "string",
-          "pattern": "^[a-fA-F0-9]{64}$"
-        },
-        "workspaceId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "checkId": {
-          "type": "string",
-          "minLength": 1
-        },
-        "treeSha": {
-          "type": "string",
-          "minLength": 1
-        },
-        "correlation": {
-          "$ref": "#/$defs/correlation"
-        }
-      },
-      "required": [
-        "ledgerVersion",
-        "event",
-        "ts",
-        "childId",
-        "receiptId",
-        "workspaceId",
-        "checkId",
-        "treeSha"
-      ],
-      "additionalProperties": false
-    }
-  }
-}

package/contracts/ledger/v3/README.md

@@ -1,36 +0,0 @@
-# pi-daddy ledger contract — version 3
-
-Canonical machine contract for one `ledgerVersion: 3` JSONL line:
-
-- `ledger-event.schema.json` — closed JSON Schema draft 2020-12 event union.
-- `fixtures/*.json` — deterministic examples generated through the production builders by
-  `scripts/generate-ledger-v3-contract.ts`.
-
-## Dispatch and compatibility
-
-1. No `ledgerVersion` and no `event` is a legacy 0.17 grant record.
-2. `ledgerVersion: 2` is validated against the frozen v2 contract.
-3. `ledgerVersion: 3` requires one known event and validation against this schema.
-4. Any unsupported explicit version, missing discriminator, unknown event, or malformed required identity is corrupt. It is never reinterpreted as legacy.
-
-The schema is closed. Adding/removing a field, event or enum member, changing requiredness, or changing meaning requires a new ledger version and versioned path. V3 is still unreleased, so its review repairs are folded into this one initial contract rather than creating a public v4.
-
-## Execution identity
-
-Every v3 **execution** event carries:
-
-- `executionId`: globally unique identity of one execution occurrence.
-- `parentExecutionId`: the unique governed execution that delegated it, or explicit `null` at a root.
-- `childId`: the readable logical tree position, retained for operators and deterministic comparisons.
-
-`workflow_fact` is not an execution event; it carries its own `factId` and explicit provenance instead.
-
-Consumers join lifecycle and lease events by `executionId`, never by `childId`. Repeated or concurrent calls may reuse a logical position such as `d0.1`; they may never reuse an execution id.
-
-A lifecycle `running` event may include `herdrPaneId` and `herdrAgentName` for navigation. These are runtime observations, not enforcement boundaries. `deadlineAt` is immutable within one occurrence and bounds how long a non-terminal start can be rendered as live; after it, the truthful state is incomplete.
-
-All timestamp fields share one schema/runtime profile: JSON Schema `date-time` with seconds restricted to `00`–`59`. Leap-second strings are excluded because JavaScript deadline and duration arithmetic cannot represent them.
-
-## Privacy and provenance
-
-The privacy boundary is unchanged: no task text, prompts, tool arguments, child output, or tool results. Fields displayed as identities and every capability use explicit ASCII identifier grammars in both schema and runtime; public builders assert that their serialized event passes the same exact reader. Correlation display fields use the identifier grammar rather than free-form prose, and a top-level null `assurance_scope` is omitted/rejected consistently. Trusted task/definition digests remain outside `correlation`. Correlation is caller-declared join metadata and never becomes proof that a workflow transition was validated or that an inline skill executed.

package/contracts/ledger/v3/fixtures/check-receipt.json

@@ -1,41 +0,0 @@
-{
-  "ledgerVersion": 3,
-  "event": "check_receipt",
-  "ts": "2026-08-20T12:00:04.000Z",
-  "executionId": "exec:00000000-0000-4000-8000-000000000002",
-  "parentExecutionId": null,
-  "childId": "check:spec-lint:00000000-0000-4000-8000-000000000000",
-  "receiptId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
-  "workspaceId": "workspace-contract",
-  "checkId": "spec-lint",
-  "treeSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-  "correlation": {
-    "schema_version": "1.0",
-    "run_id": "run-contract-001",
-    "task_id": "task-contract-001",
-    "workspace_id": "workspace-contract",
-    "context_id": "context-contract",
-    "phase": "verify",
-    "assurance": "critical",
-    "assurance_effective": "critical",
-    "policy_label": "policy-contract",
-    "assurance_source": "policy",
-    "assurance_scope": {
-      "type": "selectors",
-      "selectors": [
-        "src/**"
-      ]
-    },
-    "activated_at": "2026-08-20T12:00:00.000Z",
-    "plan_digest": "1111111111111111111111111111111111111111111111111111111111111111",
-    "definition_digest": "2222222222222222222222222222222222222222222222222222222222222222",
-    "task_digest": "3333333333333333333333333333333333333333333333333333333333333333",
-    "base_sha": "4444444444444444444444444444444444444444",
-    "head_sha": "5555555555555555555555555555555555555555",
-    "tree_sha": "6666666666666666666666666666666666666666",
-    "event_seq": 21,
-    "last_change_seq": 18,
-    "last_authority_seq": 20,
-    "check_receipt_id": "7777777777777777777777777777777777777777777777777777777777777777"
-  }
-}